Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #3149

Re: firewall that regulates programs?

Show all headers | View raw

Todd <Todd@invalid.invalid> wrote in news:m149cd$8pg$1@dont-email.me:

> Hi All,
> 
> Just out of curiosity, is there a way to get iptables or
>]equivalent to control what programs get to outbound
> access the Internet?
> 
> Many thanks,
> -T

I'm surprised that nobody has mentioned tcpd.  To a limited extent, 
you can specify what programs are allowed using it.

Here is my hosts.deny:
# hosts.deny    This file describes the names of the hosts which are
#               *not* allowed to use the local INET services, as 
decided
#               by the '/usr/sbin/tcpd' server.
#
# Version:      @(#)/etc/hosts.deny     1.00    05/28/93
# Author:       Fred N. van Kempen, <waltje@uwalt.nl.mugnet.org
# Format is <service list>: <host list>[: command]
ALL: PARANOID: spawn (echo -n "Denying %d to %h at " ; date) 
>>/var/log/syslog
ALL: ALL: spawn (echo -n "Denying %d to %h at " ; date) 
>>/var/log/syslog
# End of hosts.deny.

Here is a snip from my hosts.allow:
# hosts.allow   This file describes the names of the hosts which are
#               allowed to use the local INET services, as decided by
#               the '/usr/sbin/tcpd' server.
# Version:      @(#)/etc/hosts.allow    1.00    05/28/93
# Author:       Fred N. van Kempen, <waltje@uwalt.nl.mugnet.org
# See NET3-4-HOWTO and `man 5 hosts_access'
# Format is <service list>: <host list>[: <command>]
# Eg `wu.ftpd,www: LOCAL' allows both ftp and www
# Services NOT in inetd.conf are not controlled!  www (above) is an 
example.
# <service list> is the executable name and is a comma-delimited list
# Example: telnet line below is not valid; in.telnetd is
# <host list> may also be a comma-delimited list
# "spawn"s below tend to be taken as parameters to the executable :{

ALL: 192.168.2.127: spawn (echo -n "Allow %d from %c at " ; date) 
>/dev/tty11
in.tftpd: 192.168.2.0/255.255.255.0
-- 
buck

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

firewall that regulates programs? Todd <Todd@invalid.invalid> - 2014-10-08 14:12 -0700
  Re: firewall that regulates programs? Chris Davies <chris-usenet@roaima.co.uk> - 2014-10-09 11:05 +0100
  Re: firewall that regulates programs? Joe Beanfish <joebeanfish@nospam.duh> - 2014-10-09 13:28 +0000
    Re: firewall that regulates programs? Todd <Todd@invalid.invalid> - 2014-10-09 12:57 -0700
      Re: firewall that regulates programs? William Unruh <unruh@invalid.ca> - 2014-10-10 15:45 +0000
        Re: firewall that regulates programs? Denis Corbin <news@edrusb.is-a-geek.org> - 2014-10-11 22:08 +0200
          Re: firewall that regulates programs? Todd <Todd@invalid.invalid> - 2014-10-11 16:56 -0700
  Re: firewall that regulates programs? buck <buck@private.mil> - 2014-10-12 17:53 +0000
    Re: firewall that regulates programs? Richard Kettlewell <rjk@greenend.org.uk> - 2014-10-12 19:33 +0100
  Re: firewall that regulates programs? Chris Cox <chrisncoxn@endlessnow.com> - 2014-10-12 15:00 -0500

csiph-web